Chapter 6. Installing the load balancer

Procedure

1. Install HAProxy:

   # dnf install haproxy

2. Install the following package that includes the semanage tool:

   # dnf install policycoreutils-python-utils

3. Configure SELinux to allow HAProxy to bind any port:

   # semanage boolean --modify --on haproxy_connect_any

4. Configure the load balancer to balance the network load for the ports as described in Table 6.1, “Ports configuration for the load balancer”. For example, to configure ports for HAProxy, edit the /etc/haproxy/haproxy.cfg file to correspond with the table. For more information, see Configuration example for haproxy.cfg for HAProxy load balancer with Satellite 6 in the Red Hat Knowledgebase.

   Table 6.1. Ports configuration for the load balancer

   Service	Port	Mode	Balance Mode	Destination
   HTTP	80	TCP	roundrobin	port 80 on all Capsule Servers
   HTTPS and RHSM	443	TCP	source	port 443 on all Capsule Servers
   Anaconda for template retrieval	8000	TCP	roundrobin	port 8000 on all Capsule Servers
   Puppet (Optional)	8140	TCP	roundrobin	port 8140 on all Capsule Servers
   PuppetCA (Optional)	8141	TCP	roundrobin	port 8140 only on the system where you configure Capsule Server to sign Puppet certificates
   Capsule HTTPS for Host Registration and optionally OpenSCAP	9090	TCP	roundrobin	port 9090 on all Capsule Servers

5. Configure the load balancer to disable SSL offloading and allow client-side SSL certificates to pass through to back end servers. This is required because communication from clients to Capsule Servers depends on client-side SSL certificates.

6. Start and enable the HAProxy service:

   # systemctl enable --now haproxy